1. An overview of data protection
DATA COLLECTION ON THIS WEBSITE
Who is responsible for the data collection on this website?
he data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can be, for. E.g. data that you enter in a contact form.
Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page was viewed). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. For this purpose as well as for further questions about data protection you can contact us at any time at the address given in the imprint. Furthermore, you have a right of appeal to the competent supervisory authority.
ANALYSIS TOOLS AND TOOLS FROM THIRD PARTIES
When visiting this website, your surfing behavior can be statistically evaluated. This happens above all with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior can not be traced back to you.
This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para 1 lit. f DSGVO).
Our Hoster will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions with respect to such data.
Completion of a contract for order processing
In order to guarantee data protection compliant processing, we have concluded a contract processing contract with our hoster.
3. General information and mandatory information
We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
NOTICE ON THE RESPONSIBLE BODY
The party responsible for processing data on this website is:
Vintage Kontor, owner Johanna Bolz
Phone: + 49 (0) 211 - 78 17 64 95
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
REFUSAL OF YOUR AGREEMENT FOR DATA PROCESSING
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
RIGHT TO OBJECT AGAINST DATA COLLECTION IN SPECIAL CASES AND AGAINST DIRECT ADVERTISING (ART. 21 GDPR)
IF YOUR PERSONAL DATA IS PROCESSED TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO INTRODUCE ANY CONTESTING AGAINST THE PROCESSING OF YOU OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS IS ALSO FOR PROFILING, IF IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU CONTEST, YOUR PERSONAL DATA IS THEN NOT USED FOR THE PURPOSES OF DIRECT ADVERTISING (CONTRARY TO ARTICLE 21 EXT. 2 DSGVO).
COMPLAINTS AT THE COMPETENT SUPERVISORY AUTHORITY
In the case of violations of the GDPR, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.
RIGHT TO DATA TRANSFERABILITY
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL-BZW. TLS ENCRYPTION
This site uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or requests you send to us as a site operator. An encrypted connection is indicated by the browser's address bar changing from "http: //" to "https: //" and the lock icon in your browser bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
ENCRYPTED PAYMENT ON THIS SITE
If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing.
Payment transactions using common means of payment (Visa/MasterCard, direct debit) are only made via encrypted SSL or TLS connections. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon in your browser line is visible.
In the case of encrypted communication, any payment details you submit to us cannot be read by third parties.
INFORMATION, DELETION AND CORRECTION
Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to rectification or deletion of this data. For further information on personal data, please contact us at any time at the address given in the imprint.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:
- If you deny the accuracy of your personal information stored with us, we usually need time to verify this. For the duration of the audit you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion.
- If we no longer need your personal information, but you need it to exercise, defend or enforce legal claims, you have the right to demand that your personal information be restricted instead of being deleted.
- If you have filed an objection under Art. 21 para. 1 DSGVO, a balance must be made between your interests and ours. As long as it is not clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data may be - except for their storage - only with your consent or for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest the European Union or a Member State.
OBJECTION AGAINST PROMOTIONAL EMAILS
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
4. Data collection on this website
Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser to always inform you about established cookies, to decide case by case if you accept the cookies or generally exclude them as well as to activate the automatic delete of cookies when the browser is closed. However, the deactivation or rejection of cookies may restrict the functionality of our web offer.
Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.
If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these will be treated separately in this data protection declaration.
SERVER LOG FILES
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- - Operating system used
- - Referrer URL
- - Host name of the accessing computer
- - Time of the server request
- IP address
These data will not be combined with data from other sources.
The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and the optimization of his website - for this purpose, the server log files must be recorded.
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the performance of a contract or is required to carry out pre-contractual action. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or your consent (Art. 6 para. 1 lit. a DSGVO), if these was queried.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
INQUIRIES BY EMAIL, TELEPHONE OR TELEFAX
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We will not share this information without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the performance of a contract or is required to carry out pre-contractual action. In all other cases, the processing is based on your consent (Article 6 para. 1 lit. a DSGVO) and / or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective Processing of requests addressed to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
REGISTRATION ON THIS SITE
You can register on this website to use additional functions on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise we will reject the registration.
To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.
The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6 Para. 1 lit. b GDPR).
The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
REGISTRATION WITH FACEBOOK CONNECT
Instead of registering directly on this website, you can register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you decide to register with Facebook Connect and click on the “Login with Facebook” / “Connect with Facebook” button, you will be automatically redirected to the Facebook platform. There you can log in with your usage data. This will link your Facebook profile with this website or our services. This link gives us access to your data stored on Facebook. These are mainly:
- Facebook Name
- Facebook profile and cover picture
- Facebook profile picture
- Facebook email address
- Facebook ID
- Facebook friends lists
- Facebook Likes
These data are used to set up, provision and personalize your account.
The registration with Facebook-Connect and the associated data processing operations are based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time with effect for the future.
PROCESSING OF DATA (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only insofar as they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which allows the processing of data for the performance of a contract or precontractual measures. Personal data on the use of this website (usage data), we collect, process and use only to the extent necessary to enable the user to use the service or to bill.
Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
DATA TRANSFER AT CONCLUSION OF ONLINE SHOPS, DEALERS AND DELIVERY OF GOODS
We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract, for example, to companies entrusted to deliver goods to your location or banks entrusted to process your payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.
The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
5. Social media
FACEBOOK PLUGINS (LIKE & SHARE BUTTON)
On this website plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated. You can recognize the Facebook plugins by the Facebook logo or the "Like-Button" ("Like") on this website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
If you do not want Facebook to be able to assign your visit to this website to your Facebook user account, please log out of your Facebook user account.
The use of Facebook plugins is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the widest possible visibility in the social media.
Functions of the Instagram service are integrated on this website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by Instagram.
The use of the Instagram plugin is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the widest possible visibility in the social media.
For more information, see the Instagram Data Protection: https://instagram.com/about/legal/privacy/.
On this website we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA ("Pinterest").
When you visit a page that contains such a plugin, your browser connects directly to the servers of Pinterest. The plugin transmits protocol data to the server of Pinterest in the USA. This log data may include your IP address, the address of the websites visited, which also includes Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.
The use of the Pinterest plugin is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the widest possible visibility in the social media.
6. Analysis tools and advertising
This website uses functions of the web analytics service Google Analytics. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (eg consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent is revocable at any time.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: disable Google Analytics.
We've signed a contract-processing contract with Google and are fully implementing the strict requirements of German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses the demographics feature of Google Analytics. As a result, reports can be produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data can not be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section "Opposition to Data Collection".
Data stored by Google at user and event level that are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymized after 14 months or deleted. You can find details on this under the following link: https://support.google.com/analytics/answer/7667196?hl=de
This website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to measure conversion.
These allow the behavior of site visitors to be tracked after they click on a Facebook ad to reach the provider's website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.
Facebook pixels are used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.
You can also use the remarketing "Custom Audiences" feature in the Ads Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: <a href="http://www.youronlinechoices.com/de/praferenzmanagement/" target="_blank">http://www.youronlinechoices.com/de/praferenzmanagement/</a>. http://www.youronlinechoices.com/de/praferenzmanagement/.
7. Plugins and tools
YOUTUBE WITH EXTENDED DATA PROTECTION
This website includes videos from YouTube. Site operator is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. This mode, according to YouTube, means that YouTube does not store information about visitors to this site before they watch the video. However, sharing data with YouTube partners is not necessarily excluded by the enhanced privacy mode. So, regardless of whether you watch a video, YouTube connects to the Google DoubleClick network.
Once you start a YouTube video on this site, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you've visited. If you are logged in to your YouTube account, YouTube will allow you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
In addition, after launching a video, YouTube may store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to this website. This information is used, among other things, to capture video statistics, improve user-friendliness, and prevent fraud. The cookies remain on your device until you delete them.
If necessary, after the launch of a YouTube video, additional data processing operations may be triggered that we have no control over.
The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested (eg consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent is revocable at any time.
GOOGLE WEB FONTS
This site uses so-called web fonts provided by Google for the uniform representation of fonts. The Google fonts are installed locally. There is no connection to Google servers.
8. Online marketing and affiliate programs
AMAZON PARTNER PROGRAM
The storage of “Amazon cookies” is based on Art. 6 lit. f GDPR. The website operator has a legitimate interest in this, as the amount of his affiliate remuneration can only be determined through the cookies.
9. Payment provider and reseller
On this website we offer payment via PayPal, among other things. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you select payment via PayPal, the payment data you provide will be supplied to PayPal based on Art. XNUMX (XNUMX) (a) (Consent) and Art. XNUMX (XNUMX) (b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.
If you select payment via PayPal, the payment data you provide will be supplied to PayPal based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.